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Abstract 

An attempt to describe mathematically the error detection capabilities 
of Cyclic Redundancy Checks, also known as CRCs. The author is fairly 
knowledgeable of the topic, but is not an expert. Basic knowledge of 
modulo arithmetic and the application of CRCs is assumed. 



Content 

Given a message M and generator polynomial g, the CRC value C is the 
remainder when M is divided by g using polynomial arithmetic: 

M „ C 

— = Q+- (1) 
9 9 

Where Q is the quotient and C < g. 

Consider applying an error e to the message M to get the erroneous 
message M = M + e. Computing the "erroneous" CRC C of the erro- 
neous message M is done the same way, dividing it by g and taking the 
remainder: 

M ~ C 

— = Q+ - 
9 9 

where C < g and C is the "erroneous" CRC. 

Expanding M into our definition based on the orginal message M and 
the error e, we have: 

9 9 



Of course, we can split this quotient into a sum of two quotients: 

M + e _ M e 
9 9 9 

And now substituting in from equation 1 we get: 

=Q+- + -=Q+ (2) 

9 9 9 9 

Note the remainder of the division (M + e) fg is not necessarily equal 
to C + e, but they are equivalent under modulo g (likewise, the quotient 
of the division is not necessarily equal to Q). In other words, C + e may 
actually be larger than g, in which case we could pull additional whole 
p's out of the fraction to add to Q. In reality the remainder (i.e., the 
erroneous CRC) is given by: 

C = (C + e) mod g 

Which can of course be split up: 

C = (C + e) mod g 

= {{C mod g) + (e mod g)) mod g 
C = (C + (e mod <?)) mod g 

Where the last line follows because C is the remainder of division by g 
and is therefore strictly less than g. 

From this, we can see that the erroneous CRC, C, is equal to the 
original CRC, C, if and only if e mod g is equal to 0, or in other words, if 
e is a multiple of the generator polynomial g. 

This underlies the error detecting capabilities of CRC: any error e that 
is not a multiple of the generator polynomial g will cause the remainder of 
the division (i.e., the CRC value) to change, and will therefore be detected 
as an error. Errors that are multiples of g will, on the other hand, slip 
through unnoticed. 

Consider what happens if we apply an error e that is strictly smaller 
than the polynomial: e < g. Remember that in our binary polynomial 
arithmetic, this means that e has strictly fewer significant bits than g. 
Clearly, a non-zero value less than g cannot be a multiple of g, so any 
such error will necessarily be detected by the CRC. 

However, this only covers errors in the lowest n bits (where the gen- 
erator g has n + 1 bits). What happens if we shift this error e up to some 
other location in the message? Shifting is of course equalivalent to mul- 
tiplication, but since we're using polynomial division, it is multiplication 
by a power of the variable x. Specifically, multiplying e by x % will shift e 
up by i bits (which is easy to see if you remember that the "bits" of e are 
actually the coefficients of a polynomial). 

Now the actual error that is applied is equal to ex z , where e is still 
strictly less than g. The same logic applies though: If we replace e in the 
expressions above with ex 1 , we see that the error will be detected if and 
only if ex 1 is a multiple of g. 



In other words, if ex 1 divided by g has a non-zero remainder, it will 
be detected as an error: if it has a remainder of 0, it will not be detected. 
This quotient can of course be split into the product of two quotients: 



ex e x 
9 9 9 



Now we can expand each of these into a quotient and a remainder, 
but notice that since we have stipulated that e < g, the quotient for that 
piece will be and the remainder will simply be e: 

?? = (o+?)(p+L 

9 V 9 J V 9 

Here, we have expanded each fraction into a quotient and remainder, 
where P is simply the quotient of x % divided by g, and r is the remainder 
of the same. We can pull a factor of - out of every term on the right hand 
side of the equation and get the following: 

ex % _ e (Pg + r) 
9 9 

(because P divided by - is of course equal to Pg). 
Thus: 

ex 1 = e (Pg + r) (3) 

To summarize where we are, if e (Pg + r) is a multiple of p, than so 
is ex 1 (because they are equal by equation 3), and the error ex 1 (which is 
error pattern e, shifted by i bit-places) will therefore be undetected. If it 
is not a multiple of g, the error will be detected (as shown previously). 

Notice that if e (Pg + r) is a multiple of #, then taken modulus g it 
will be equal to 0: 

e (Pg + r) mod g = (e mod g) ((Pg + r) mod g) mod g (4) 

= (e) ((Pg mod g) + (r mod g)) mod g (5) 

= e (0 + (r mod g)) mod g (6) 

= e(0 + r) mod# (7) 

= er mod g (8) 

Equation 4 is a property of products under modulus. Gcnerically: 

ab mod M = ((a mod M) (b mod M)) mod M 

A similar treatment applies to sums under modulus, which is applied 
to (Pg + r) from equation 4 to equation 5. The other simplification in 
equation 5 follows because we have stipulated that e < g and therefore 
e mod g = e. 

Equation 6 is simply observing that the product Pg is a multiple of g 
and is therefore equal to when taken modulus g. 

Equation 7 follows because we have defined r as the remainder when x % 
was divided by g, and we therefore have r < g. The results are simplified 
in equation 8. 



And so it comes down to this: if er mod g is equal to 0, the error ex 1 
will be undetected, otherwise, it will be detected. In otherwords, if and 
only if the product er is a multiple of g, the error will be undetected. 

First, let us look at the trivial case where er is equal to (i.e., Og). 
This requires that e or r be equal to 0. If e is equal to 0, it means there 
was no error to detect, so we can ignore that. 

On the other hand, r will be equal to zero if and only if x % is divisible 
by g (because r is the remainder of this division). Note that generically 
x % is only evenly divisible by x k , for any k < i, so as long as g is not equal 
to x k for any k < i, x % will not be divisible by g, and so r will not be zero. 
In otherwords, g should have more than one non-zero coefficient (so that 
it takes the form x k -\-p (x) for some non-zero polynomial p (#)), and that 
is sufficient for ensuring that r will not be 0. 

Now consider the non-trivial cases, where er = kg for some integer 
k > 0. Generally, there is no reason to assume this couldn't happen. 
However, consider what happens if g is prime. If g is prime, then the only 
way to expand kg is by expanding k into its factors (because g is prime, 
it cannot be expanded into factors). For instance, if k = mn, then we 
have er = kg = rung, which looks like er = m(ng). In otherwords, no 
matter how you break this up, one of the terms in the product (i.e., one 
of e and r) must be a non-zero multiple of g. But since we have already 
seen that both e and r are strictly less than g, this is not possible. In 
otherwords, er cannot possibly be equal to kg if g is prime, which means 
(if you trace the logic back far enough) that ex z cannot be a multiple of 
g and therefore cannot slip through undetected. 

In summary, if the generator polynomial g is prime and has at least 
two non-zero coefficients, then any error e which is strictly smaller than 
g will be detected by the CRC algorithm. 

In practical terms, this means that an n-bit CRC (where the CRC 
value is n bits long, and the generator polynomial is n + 1 bits long) 
will be able to detect any single error vector that has no more than n 
signigicant bits, no matter where in the message it is applied, and no 
matter how long the message is. 

Notice that this does not mean it can always detect n bit errors. If 
those errors are spaced apart in the message, then the error vector e will 
actually have more than n significant bits, and the above no longer holds. 
It is still possible for the CRC to detect the error (anytime the error is not 
a multiple of g) , but it is not guaranteed for any particular size of error 
greater than n. 



